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MARKED-UP VERSION SHOWING CHANGES MADE 

Personalization of security modules 

Field of the Invention 

[0001] The invention relates to the personalization 

of cryptographical security modules . 

Prior art Background of the Invention 

[0002] For operating automated teller machines, in 

particular, security modules are used which comprise a 
cryptographical processor and a key memory. During 
operation of the automated teller machine, the security 
module cryptographically protects all messages from or 
to a central system. The key memory cannot be read from 
the outside, but rather may be used only for 
cryptographical operations, which means that once a key 
has been transmitted to the security module it can no 
longer be compromised. 

[0003] This operation, called personalization, is 

critical from the point of view of security 
engineering. This applies particularly to the 
symmetrical encryption used to-date, e.g. the DES 
method, in which one and the same key is used for 
encryption and decryption. The manufacturer of the 
security module therefore needs a high level of 
complexity in order to protect the keys used from being 
discovered — opicd — e«t. In particular, personalization 
needs to be performed on secure-access premises by 
special personnel. When only a few master keys are 
used, a particularly high level of security complexity 
is needed. Customer-specific programming requires a 
high level of logistical and storage involvement, 
including the guarding of the store and transport. 



[0004] It is an object of the invention to provide a 
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method which allows the personalization to be performed 
immediately during startup by the customer himself at 
the place of use or in another not especially secure 
environment . 

[0005] Patent specification US 6, 442, 690 Bl 

describes a personalization system for a 
cryptographical module. In this context, the 
cryptographical module is provided with a provisional 
key. For the purpose of personalization, a check is 
first carried out to determine whether this provisional 
key is available, and if appropriate is exchanged for a 
new one. In this case, the new keys are provided by the 
personalization unit by virtue of key management. It 
also proposes the use of asymmetrical methods, which 
involve the use of a key pair comprising a public key 
and a secret key. The characteristics and advantages of 
asymmetrical methods over symmetrical methods are known 
from the relevant literature; knowledge of these is 
readily assumed below. 

[0006] Patent specification US 6,298, 336 Bl 

describes a transportable activation appliance for chip 
cards with a payment function, the chip cards being 
unusable until they are activated for the envisaged 
applications in a cryptographical ly secure fashion. 

[0007] Patent specification DE 199 19 909 C2 

describes a method in which a message can be signed 
using symmetrical encryption and can be transmitted in 
plain text without the need for the station producing 
the signature to have the secret key. Thio — method — 
used optionally in an embodiment of the invention. 

Summary of the Invention 



[0008] The invention uses the insight that a 
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transportable personalization appliance which is of 
similar design to a security module and, in particular, 
contains a protected key memory and a cryptographical 
processor operating therewith allows the method 
described by the invention to be handled particularly 
advantageously. The use of chip cards, in particular, 
is advantageous ^ — great — advantage — in this — oaoO / since 
these together with mobile computers make a portable 
personalization appliance readily available. If a 
personalization appliance of this type is connected to 
the security module in situ, then this alone provides a 
high level of security for the correct security module 
actual being personalized. One particular advantage is 
that the security module is already at the final 
location, and hence no further transport is required 
which would need to be protected by guards . In the 
preferred embodiment, there is additionally provision 
for reciprocal authentication of the security module 
and the personalization unit, involving the security 
module being provisionally initialized, but not 
personalized, by the manufacturer. This initialization 
may be the same for all modules, possibly apart from 
consecutive serial numbers. 

[0009] What is involved is a security module, a 

personalization unit and a method for use thereof, 
where the security module contains the secret key from 
a key pair for asymmetrical encryption, and the 
personalization unit produces a certificate about the 
public key from the key pair and sends it to the 
security module together with the public key from a 
central system. The security module uses this 
certificate and the public key to protect the 
communication with a central system, particularly in 
the field of banking. 



Doocription Brief Description of the Drawings 
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[0010] The sole figure Figure — 1 — schematically shows 

the invention in context . 

Detailed Description of the Preferred Embodiments 

[0011] An automated teller machine 10 contains a 

security module 12 and is connected in later use to a 
central system 22 via a network connection 24 in a 
network 20. In addition, a personalization unit 30 is 
shown which has a chip card 32 having a cryptographical 
processor and a secure key memory. The dashed line in 
figure 1 is intended to indicate that the 
personalization ^unit 30 is placed only temporarily into 
the physical proximity of the security module 10 and is 
connected via the data connection 34. 

[0012] The term ^'central system" is used generically 

for remote communication stations connected to the 
security module in the operating state. 

[0013] The personalization unit is preferably a 

mobile computer which is equipped with a chip card as a 
cryptographical unit. This chip card comprises a secure 
key memory and uses the keys stored therein to perform 
the necessary cryptographical methods using data which 
are transmitted via an interface on the chip card. The 
key memory is protected to the extent that the protocol 
on the interface is monitored fully by the processor on 
the chip card and is in a form such that the secret 
keys from the key memory are not transmitted via the 
interface; it is merely possible to apply them to data. 
Accordingly, the integrity of public keys is produced 
either through storage in the key memory or by storing 
cryptographical hash values in the key memory. Even 
though the known embodiment as a chip card is preferred 
according to ISO, a processor card in the PCMCIA format 
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or an external module connected by USB or Firewire may 
also be used. All of the software and the key memory 
may readily also be contained in the mobile computer 
itself, even though this is not the preferred 
embodiment on account of the lower security in mobile 
computers which are available at present - 

[0014] In addition to the opportunity for 

cryptographical processing and the secure key memory, 
the personalization unit has a communication interface 
which can be used for temporarily setting up a 
connection to the security module. In the simplest 
case, this is a serial connection based on V.24, where 
a cable with connectors is temporarily plugged in and 
the connection is controlled by a user in this manner. 
Other data connections such as l^C, USB, Firewire etc. 
are equally possible. Wireless connections via infrared 
or radio, such as IrDA or Bluetooth, may be used 
equally well; in this case, there is no physical setup 
on a connection. Bluetooth has the additional advantage 
that encryption of the communication is built in, even 
though the key management is left to the application. 
Thio io the caoo here anyway. 

[0015] Cable and infrared connections have the 

advantage that the operator is very vjcll able to ensure 
that the intended appliance is personalized if the 
connection is routed directly to the security module 
which is to be personalized. For many uses, this 
authentication may be sufficient, which means that the 
preferred cryptographical authentication described 
below can be dispensed with. 

[0016] Following delivery and prior to the start of 

personalization, the security module is in a 
personalization state which differs from the subsequent 
operating state. 
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[0017] The connection between the personalization 

unit and the security module is preferably a 
cryptographically secure connection based on known 
methods^ such as are known as TLS in connection with 
HTTPS, for example- Once the connection has been set up 
and is available, these methods ensure that the 
subsequent communication can be neither monitored nor 
modified. This is normally done using a random key 
which is provided either on the basis of the Diffie- 
Hellmann method without authentication or within the 
context of authentication, such as in line with the 
publication WO 91/14980 the contents of which are 
incorporated herein by reference . The security demands 
on the reciprocal authentication, which need to be 
ascertained for each instance of use, thus determine 
the demands on the authentication which is to be used. 
In this regard, said patent specification DE 199 19 909 
02 , incorporated herein by reference, may also be of 
use, according to which the manufacturer can put a 
certificate into a security module without possessing 
the key for the verification. It is also possible for 
the manufacturer to equip every security module with a 
random key, which the accompanying documents contain or 
which is sent independently via secure channels. 
Reciprocal authentication then takes place using known 
challenge-response methodST — e.g. — based on European 
patent EP 552392 . 

[0018] Once the secure connection has been set up 

between the security module and the personalization 
unit, the security module uses it to send the public 
key from a key pair whose private key is stored in its 
secure key memory. This key pair, subsequently also 
called module key, may be generated during actual 
manufacture, since the private key cannot leave the 
security module and therefore also cannot be 
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compromised on the manufacturer's premises. 
[0019] Preferably, the key pair is not produced 

until personalization, however, because then the 
influence of the manufacturer is less and hence its 
security proportions are less complex. In addition, a 
modifier (also referred to as ^salt' in the literature) 
prescribed by the personalization unit can be 
transmitted too and influences the key pair produced. 

[0020] The security module now transmits the public 

key to the personalization unit. The latter uses the 
secret key (stored in it) from a further key pair, 
subsequently referred to as a signing key, and in so 
doing signs the public module key received from the 
security module. Such a signature for a public key, 
with or without this signed public key, is subsequently 
referred to as a certificate. 

[0021] The personalization unit uses the existing 

secure connection to return the certificate to the 
security module, which stores the certificate 
permanently and such that it is protected against 
alteration for use in the operating state described 
below. In this case, as mentioned above, the integrity 
is protected by means of the secure key memory. 

[0022] In one development of the invention, the 

personalization unit also returns, together with the 
certificate, a public key from a central system to 
which the security module needs to be connected in 
future in the operating state. Preferably, this public 
key is likewise provided with a certificate by the 
personalization unit, although the security module 
cannot check this certificate until the security module 
contains a secure public key from the personalization 
unit. The latter therefore thirdly sends its public key 
together with a further certificate. This certificate 
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may either be issued by the central system and can then 
be checked with the likewise transmitted public key 
from the central system. This circular certification 
should be regarded more as a plausibility check, 
because the personalization unit is readily able to 
produce an arbitrary key pair for the central system 
itself and can then provide the necessary certificate. 

[0023] A better approach is the solution in which 

the public key from the personalization unit has been 
signed by a further key pair from the manufacturer, the 

manufacturer having entered his public key into the 
security module during manufacture. The corresponding 
certificate is transmitted to the security module by 
the personalization unit. 

[0024] Hence, it is then no longer necessary to 

authenticate the personalization unit to the security 
module when the connection is set up, since the 
personalization includes a check on the certificates 
transmitted by the personalization unit. The fact that 
the public module key may then possibly be read without 
authorization is not critical according to the 
principle of asymmetrical encryption. The manufacturer 
merely needs to sign the customers' signing keys as 
required and to enter its own public key into the 
security module. 

[0025] If signing the signing key from the 

personalization unit means that data interchange takes 
place between the manufacturer and the operator of the 
personalization unit any way, then the public key from 
the manufacturer is also preferably interchanged too. 
The security module then produces a further key pair at 
the conclusion of the manufacturing process, said 
further key pair being permanently maintained and being 
used for securely identifying the security module. The 
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associated public key is signed by the manufacturer, 
and the certificate is loaded into the security module. 
The security module is thus able to prove its identity, 
that is to say to authenticate itself, by signing its 
serial number and other data prescribed by the 
personalization unit, such as a time stamp and random 
numbers . 

[0026] The connection between the personalization 

unit and the security module is now cleared down, and 
hence the personalization unit is isolated from the 
security module. The security module thus changes to 
the normal operating state, in which further 
personalization is not possible. Fresh personalization 
can be enforced by means of direct intervention in the 
security module (or else by a command, for example from 
the central system, which has been protected against 
misuse in whatever manner) . However, this resetting to 
the personalization state entails the security module 
erasing the key pair and enforcing generation of a new 
key pair as part of the subsequent personalization. 

[0027] In the operating state which follows 

personalization, a connection is now set up between the 
security module and the central system, said connection 
likewise being protected through cryptographical means, 
particularly session keys. In this context, the 
security module sends the certificate issued by the 
personalization unit to the central system together 
with its public key. The central system has previously 
been sent the public key from the personalization unit 
using an integrity-controlled connection. (By way of 
example, the chip card is personalized by the central 
system) . The central system is thus able to check 
whether the security module is authorized for the 
subsequent transactions and, by way of example, is 
reliably able to convey the fact that an authentic bank 
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card for a particular account number is available for 
paying a sum which has been sent at the same time. As a 
result of the security module having received from the 
personalization unit the public key from the central 
system, the security module again has the assurance 
that the messages received from the central system, 
e.g. the instruction to pay a sum of money, originate 
from an authorized central system. 

[0028] For reasons of compatibility or speed, it is 

also possible for a symmetrical key to be transmitted 
from the central system to the security module, said 
symmetrical key then being entered into the secure key 
memory and being used for a limited time for 
transactions using previous methods based on 
symmetrical cryptography . 

[0029] In the preferred embodiment, any 

personalization on the chip card is shown in a log. 
This ensures that the certificate issued can be 
reconstructed at any time. If the chip card is 
compromised, disabling the associated public key in the 
central system quickly provides an effective 
countermeasure . 

[0030] A security module which has not been 

personalized by the invention needs no particular 
guarding either during storage or during transport, 
since it cannot be used without personalization. This 
means that the value of the module is not significantly 
above the manufacturing value either and is also not 
customer- specific . 

[0031] Since the personalization unit in the 

preferred embodiment can be used only with a chip card 
as cryptography unit, only the chip card needs to be 
protected against misuse if the software is in an 
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appropriate form. For this purpose, banks, in 
particular, have effective administrative methods 
available using the four eyes principle. 

[0032] One variant of the invention uses the 

existing data network, which is necessary anyway in the 
operating state, to connect the security module to the 
personalization unit. This allows the personalization 
unit to be operated securely and also to be integrated 
into the central system. In the latter case, the 
transmission of the public signing key from the signing 
system to the central system (which transmission needs 
to be protected against corruption) is simplified. 

[0033] In this case, appropriate protocol elements 

are used to set up a cryptographically secure 
(particularly against corruption) connection. As part 
of the secure identification and authentication, it is 
necessary to ensure that also the ^^correct" security 
module is personalized. 

[0034] The first solution involves an operator using 

a temporary direct data connection to enter a one-off 
transaction number which is sent to the personalization 
unit. This transaction number can be transported in 
security envelopes and may comprise 16 or more 
characters, for example. The connection to the security 
module also does not need to be secure, since the 
transaction number becomes worthless immediately after 
input. It thus suffices to have a simple key pad with a 
simple serial interface which is connected temporarily 
to the security module. If the security module has a 
key pad anyway, for example for diagnostic purposes, 
then this can be used for inputting the transaction 
niamber . 



[0035] 



For very long transaction numbers, a mobile 
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computer having one of the interfaces indicated above 
is used. Preferably, the transaction numbers are then 
stored on a chip card, even though (encrypted) storage 
is likewise possible in the mobile computer's file 
system. 

[0036] Alternatively, a mobile computer is used 

which conveys the secure identification. The mobile 
computer uses two data interfaces, one for local 
connections and one for long-distance connections. For 
the local connections, the devices already mentioned 
above which are used for temporarily connecting the 
personalization unit in the other variants are 
suitable. For the long-distance connections, either 
mobile radio connections or other network connections 
are suitable. It is likewise possible to route these 
connections via the local connection. The mobile 
computer may therefore also be a mobile telephone. 

[0037] One variant of this conveyed identification 

produces a random number in the mobile computer and, on 
the one hand, sends it to the security module via the 
local connection, with the security module immediately 
forwarding it to the personalization unit. In parallel 
therewith, the random number is sent directly to the 
personalization unit via the long-distance connection. 
In the case of a mobile telephone, the caller number 
communicated by the network operator will suffice in 
order to provide adequate assurance of the identity of 
the mobile telephone. In the case -of a general mobile 
computer, a secure HTTP connection using the TLS 
protocol is preferably used, in which case a chip card 
may also be used to protect the certificates used. 

[0038] In this context, the identifying random 

number can be produced by any of the three appliances. 
Preferably, the random number is produced in the 
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personalization unit, which sends it to the security 
module/ which sends it to the mobile computer, which 
returns it to the personalization unit. Only then is 
personalization continued. In this case, the random 
number has the same function as the transaction number 
previously; it is not formed until required. Forming it 
in the personalization unit assures the quality. 
Accordingly, the random number may also be formed in 
the security module. 

[0039] In this case too, a mobile appliance is 

temporarily connected to the security module and 
assures the personalization unit of the identity of the 
security module which is to be personalized. 

[0040] In all of these variants, the security module 

is personalized by virtue of the public key from a key 
pair produced in the security module being certified by 
a certification unit. The certificate obtained in this 
manner is stored in the security module and is 
characteristic of the subsequent operating state. The 
authentication to the certification server is based on 
a temporary data connection between the security module 
and a mobile input unit which a user uses for this 
purpose - 



